This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json) Hash identifier: S/xmB+zRGFS60BdIxxmmjyIKqItzY4Z10LVnBfzwj2s= Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985 Certificate serial: 0CD0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft Manifest number: 0CC0 Signing time: Sun 21 Dec 2025 16:41:24 +0000 Manifest this update: Sun 21 Dec 2025 16:41:24 +0000 Manifest next update: Sun 21 Dec 2025 22:41:24 +0000 Files and hashes: 1: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: entf16yZHouZPD+FpbqJgNbGDD1AIgqeI9NP7OJ57/M=) 2: iFNWz1s03opy6tw4o0dL2HLh85w.roa (hash: rJb0Cf8r/TMQB2flbiJonEOGNUQgEHZ2qMHMgoJNvVo=) 3: p4my-XSsM49Q-iNITr_6AgRgzHE.roa (hash: RgvHwk+/dBQhQO4TTGk8PLduIMpNhMhJLkZlqXsN+4c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3280 (0xcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985 Validity Not Before: Dec 21 16:41:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39: 6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29: 57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f: b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc: 69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4: a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90: c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de: 7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72: bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7: 32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3: 88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f: 13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad: 74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94: 5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c: 91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a: 00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15: a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B X509v3 Authority Key Identifier: keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2d:fc:98:ce:7c:85:a9:82:af:82:da:6a:96:e5:ab:1f:80: a6:cb:1d:33:70:ef:36:ef:3a:1d:f2:f6:e4:27:3b:d8:69:30: b3:33:44:78:bb:ab:37:13:67:b1:0e:2b:fd:b8:9c:82:b9:80: f5:2e:98:f7:e9:8e:d3:a0:5c:57:8c:c8:9f:3a:54:26:75:92: 40:f3:10:5f:fa:98:ce:96:eb:96:96:9e:b5:0c:59:d4:8b:68: a3:a5:b5:48:21:99:38:b8:e2:68:36:40:02:59:f2:b1:17:cd: 11:65:cf:df:ed:d0:b7:10:c9:ab:2e:6d:00:40:1d:4e:a6:e3: 92:a1:c4:7e:6b:d7:37:8f:1a:56:00:10:b6:da:3e:08:0c:94: 78:de:90:7e:4b:42:84:92:4c:9c:92:c0:e8:76:f6:c2:7e:54: 74:60:6f:7b:19:76:5e:75:e6:b6:5c:4d:ad:d1:b0:a0:da:85: c4:db:88:51:22:bd:7c:5f:fc:e5:9a:fb:17:88:22:bd:6f:83: dd:e8:83:59:de:77:7d:cc:3e:45:62:e2:9a:43:27:62:62:34: 70:6d:cd:1e:ab:54:8d:a7:84:98:8f:fd:42:f2:e3:3b:38:e0: 92:f7:d1:45:0a:ee:59:63:ea:84:b8:ee:57:27:ba:1f:6b:c0: 3a:6d:fa:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEUy NTkzNEZFOEQ4OTk1OTQyNUQxMDE4RUIxMjE5ODFEQTI1MDk4NTAeFw0yNTEyMjEx NjQxMjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE0QjJCODg5NTFBODQy OEZFNzM0QzAxMjNFQjREOUY5OUI1RTlCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDICvL5gGfdurRC8af6OW9wV6RY5UjADwR39mmwKVdqZ/w5JcbH LkR8bditT7G/zWPJlBqBkwMIqosYzGn7SHH2bR9pLrNdLkrJ5KhxlAL71B0r8pCw 8t/pkMYoE9oJX5AF1vKAjBda3nsONc7r46x4ENZE8bHscrxC3YoyeZ2auCuMxf/X pzL/0KI1LP8mQmK3QjNjs4gi4PI8de52SsRt7yDUnxNZcba7ZTV3/EhTZubXrXTH lGX2gQa29tcll/xFlFwWwB7rAGOtT7vnuNOLXJEYJE9Wk1lvNb9sORAmGgDqets+ H51tmgr9XHB2FaKjmFd5zcPgve9hbzjB9LXTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUpLK4iVGoQo/nNMASPrTZ+ZtemzswHwYDVR0jBBgwFoAUTiWTT+jYmVlCXRAY 6xIZgdolCYUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA0 OC9UaVdUVC1qWW1WbENYUkFZNnhJWmdkb2xDWVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RpV1RULWpZbVZsQ1hSQVk2eElaZ2RvbENZVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNDgvVGlXVFQtalltVmxD WFJBWTZ4SVpnZG9sQ1lVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH4t/JjOfIWpgq+C2mqW5asfgKbLHTNw7zbvOh3y9uQnO9hpMLMzRHi7qzcT Z7EOK/24nIK5gPUumPfpjtOgXFeMyJ86VCZ1kkDzEF/6mM6W65aWnrUMWdSLaKOl tUghmTi44mg2QAJZ8rEXzRFlz9/t0LcQyasubQBAHU6m45KhxH5r1zePGlYAELba PggMlHjekH5LQoSSTJySwOh29sJ+VHRgb3sZdl515rZcTa3RsKDahcTbiFEivXxf /OWa+xeIIr1vg93og1ned33MPkVi4ppDJ2JiNHBtzR6rVI2nhJiP/ULy4zs44JL3 0UUK7llj6oS47lcnuh9rwDpt+tQ= -----END CERTIFICATE-----Generated at Sun Dec 21 18:22:32 2025 by rpki-client